Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3483. PoCs published by Stephan Sattler.
AI-analyzed exploit summary The exploit details multiple vulnerabilities in Primitive CMS 1.0.9, including unauthorized access, HTML injection, and blind SQL injection. It provides vulnerable code snippets and PoC examples for SQL injection via POST parameters.
Description
cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. NOTE: this vulnerability can be leveraged to conduct cross-site scripting attacks, as demonstrated using the (1) title, (2) content, and (3) menutitle parameters.
Exploits (1)
The exploit details multiple vulnerabilities in Primitive CMS 1.0.9, including unauthorized access, HTML injection, and blind SQL injection. It provides vulnerable code snippets and PoC examples for SQL injection via POST parameters.